Data inspection system and method

Abstract

A system continuously stores, as machine learning data, metadata results associated with a previous cyber-attack, a previous inspection class policy definition at a time of the previous cyber-attack, and a result of a previous data protection operation taken upon indication of the previous cyber-attack; continuously monitors for a new security condition or event; detects the new security condition or event; determines an appropriate inspection class policy from a plurality of inspection class policies based on the new security condition or event; based on the determined inspection class policy and the machine learning training data, determines a specific class of inspection tool from a plurality of classes of inspection tools or a specific level of inspection from a plurality of different levels of inspection for the new security condition or event; and executes the specific class of inspection tool or the specific level of inspection using the specific class of inspection tool on a particular data object to be inspected.